Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240981 4.3 警告 LinPHA - LinPHA におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-7223 2012-09-25 17:27 2008-07-20 Show GitHub Exploit DB Packet Storm
240982 10 危険 Horde - Horde Kronolith H3 などにおける脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7219 2012-09-25 17:27 2008-02-6 Show GitHub Exploit DB Packet Storm
240983 7.5 危険 ming han - AJchat の directory.php における SQL インジェクション攻撃を実行される脆弱性 CWE-89
SQLインジェクション
CVE-2008-7210 2012-09-25 17:27 2009-09-11 Show GitHub Exploit DB Packet Storm
240984 7.5 危険 InsaneVisions - OneCMS の a_upload.php の add2 アクションにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7209 2012-09-25 17:27 2009-09-11 Show GitHub Exploit DB Packet Storm
240985 6.8 警告 InsaneVisions - OneCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-7208 2012-09-25 17:27 2009-09-11 Show GitHub Exploit DB Packet Storm
240986 4.3 警告 openwebmail.acatysmoof - OpenWebMail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-7202 2012-09-25 17:27 2009-09-10 Show GitHub Exploit DB Packet Storm
240987 7.8 危険 Lantronix, Inc. - Lantronix MSS485-T におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-7201 2012-09-25 17:27 2009-09-10 Show GitHub Exploit DB Packet Storm
240988 5 警告 PHOENIX CONTACT - Phoenix Contact FL IL 24 BK-PAC におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2008-7199 2012-09-25 17:27 2009-09-10 Show GitHub Exploit DB Packet Storm
240989 10 危険 mark reinsfelder - metashell における脆弱性 CWE-noinfo
情報不足
CVE-2008-7196 2012-09-25 17:27 2009-09-10 Show GitHub Exploit DB Packet Storm
240990 4 警告 Netwin Ltd - NetWin Surgemail の IMAP サービスにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-7182 2012-09-25 17:27 2009-09-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269601 8.8 HIGH
Network
ui edgeos Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being e… CWE-269
 Improper Privilege Management
CVE-2017-0935 2024-11-21 12:03 2018-03-22 Show GitHub Exploit DB Packet Storm
269602 8.8 HIGH
Network
ubnt edgeos Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being exp… CWE-269
 Improper Privilege Management
CVE-2017-0934 2024-11-21 12:03 2018-03-22 Show GitHub Exploit DB Packet Storm
269603 8.0 HIGH
Network
ubnt edgeos Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from a Cross-Site Request Forgery (CSRF) vulnerability. An attacker with access to an operator (read-only) account could lure an admin (root) u… CWE-352
 Origin Validation Error
CVE-2017-0933 2024-11-21 12:03 2018-03-22 Show GitHub Exploit DB Packet Storm
269604 8.8 HIGH
Network
ubnt edgeos Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of validation on the input of the Feature functionality. An attacker with… CWE-269
 Improper Privilege Management
CVE-2017-0932 2024-11-21 12:03 2018-03-22 Show GitHub Exploit DB Packet Storm
269605 6.5 MEDIUM
Network
gitlab gitlab Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users. CWE-863
 Incorrect Authorization
CVE-2017-0927 2024-11-21 12:03 2018-03-22 Show GitHub Exploit DB Packet Storm
269606 8.8 HIGH
Network
gitlab
debian
gitlab
debian_linux
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user login. CWE-863
 Incorrect Authorization
CVE-2017-0926 2024-11-21 12:03 2018-03-22 Show GitHub Exploit DB Packet Storm
269607 7.2 HIGH
Network
gitlab
debian
gitlab
debian_linux
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaint… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2017-0925 2024-11-21 12:03 2018-03-22 Show GitHub Exploit DB Packet Storm
269608 6.1 MEDIUM
Network
gitlab gitlab Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting. CWE-79
Cross-site Scripting
CVE-2017-0924 2024-11-21 12:03 2018-03-22 Show GitHub Exploit DB Packet Storm
269609 6.1 MEDIUM
Network
gitlab gitlab Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting. CWE-79
Cross-site Scripting
CVE-2017-0923 2024-11-21 12:03 2018-03-22 Show GitHub Exploit DB Packet Storm
269610 7.5 HIGH
Network
gitlab gitlab Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in an information disclosure on any board object. CWE-863
 Incorrect Authorization
CVE-2017-0922 2024-11-21 12:03 2018-03-22 Show GitHub Exploit DB Packet Storm